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Vulnerability  Assessment 


The  process  the  commander  uses  to  determine 
the  susceptibility  to  attach  from  the  full  range 
of  threats  to  the  security  of  personnel,  family 
members,  and  facilities,  which  provide  a  basis 
for  determining  antiterrorism  measures  that 
can  protect  personnel  and  assets  from 
terrorist  attacks. 


“  DOD! 2000.16; ,  June  14,  2001 
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Newsweek? 

6:14  p.m.  ET  July  23, 2004 

“The  reduction  in  fragmentation  and  lack  of 
information  sharing  [among  the  agencies]  is  still 
not  adequate,”  Kean  told  a  group  of 
reporters.  “All  these  agencies  have  got  to 
change ...  Time  is  not  our  side.  We  believe  unless 
we  implement  these  recommendations  we  are 
going  to  make  ourselves  more  vulnerable  to  a 
terrorist  attach.” 
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Water  Supply  Threat  Composition 


Terrorist 


Ingestion/Sickness 
Refusal  to  Drink 
Deny  Access 


Bioloaical 


Disruption  of  way  of  life 
Fear 

Use  of  resources 

Illness 

Death 


Canada  and  the  U.S.  Have 
United  Against  Fighting  Terrorism 


“...we  are  a  country  awakened  to  danger  and  called  to 
defend  freedom.  Our  grief  has  turned  to  anger,  our 
anger  to  resolution,  and  whether  we  bring  our 
enemies  to  justice,  or  justice  to  our  enemies,  justice  will 
be  done.” 

-  President  George  Bush 

“Given  the  responsibility  to  address  new  threats,  such  as 
non-state  terrorism...the  Government  will  develop... 
Canada’s  first  national  security  policy...[and]...will 
engage  with  the  United  States  to  further  strengthen 
North  American  security.” 

-  Prime  Minister  Paul  Martin 
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Job  losses  lose  to  security 

ferroriim  dubbed  top  economic  threat 


WASHINGTON  -  Terrorism  has  replaced  weak 
employment  growth  and  the  ballooning 
budget  deficit  as  the  biggest  immediate 
threat  to  the  economy,  the  National 
Association  for  Business  Economics  said. 


-  MARTIN  CRUTSINCER  THE  ASSOCIATED  PRESS 
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DRINKING  WATER  IUPPLV*  Terror!*!*  had  eye*  on  water 
tecurtty  bulletin  reveal*  treatuient  facility  plot  detail* 

By  I.M.  KALIL  and  PAVE  BERN) 

©  Copyright  2004,  REVIEW-JOURNAL 


Recent  government  intelligence  suggests  terrorists 
have  discussed  recruiting  employees  of  water 
treatment  facilities  to  poison  drinking  supplies  in  hopes 
of  causing  mass  casualties,  according  to  a  federal 
bulletin  obtained  by  the  Review-Journal. 
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II 

EXAMPLES  OF  WATER  TERORISM 
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There  Have  Been  Many  Reported 
Water  System  Threats  &  Attacks 


Date 

Headline  Title 

Affected  Area(s) 

Feb  99 

"Angolan  agents/rebels  blamed  for  16  bomb  attacks  in  Zambia" 

Angola 

Feb  02 

"4  Terror  Suspects  Arrested  in  Italy" 

Italy 

Apr  02 

"Water-poisoning  plot  uncovered,  Iraqis  arrested" 

Jordan 

Jan  03 

"British  army  defuses  firebomb  at  North  Irish  waterworks" 

Ireland 

Jan  03 

"Security  breech  shuts  down  water  plant" 

Florida  USA 

Feb  03 

"Man  sentenced  for  polluting  wells" 

Ohio  USA 

Mar  03 

"Philippine  rebels  bomb  water  reservoir" 

Philippines 

Mar  03 

Tennessee  USA 

Water  terrorism  threatened  in  New  Zealand”  ^ 

New  Zealand 

Apr  03,,,,,", 

Pennsylvania  USA 

May  03 

"Officials  call  water  safe  from  anthrax" 

Maryland  USA 

Sept  03 

"Las  Cruces  dumps  2  million  gallons  after  break-in" 

Texas  USA 

Nov  03 

"Discolored  water  OK  to  drink,  Carpentersville  officials  say" 

Illinois  USA 

Nov  03 

"Lax  security  at  Montreal  water  plant  revealed" 

Canada 

Nov  03 

"Chemical  facilities  still  vulnerable" 

CA,  PA,  MD,  NJ,  TX 
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Headline  News,  12  Feb  02... 


“Italian  authorities  have 


Italy  disrupts  plot  against  U.S 


4  arrested  after  a  raid  found 
j  cyanide,  water-supply  maps 


By  Eric  J.  Lyman 
Special  for  USA  TODAY 

ROME  -  Italian  police  ar¬ 
rested  four  Moroccan  men 
Wednesday  who  are  suspected 
of  planning  to  poison  the  water 
supply  that  feeds  the  US  Em¬ 
bassy  in  Rome. 

The  arrests  increased  con¬ 
cern  that  Italy  may  be  a  base 
for  terror-related  activities. 

State  Department  spokes¬ 
man  Richard  Boucher,  echoing 
a  statement  released  by  the 
Embassy,  praised  Italy’s  police 
force.  Italian  authorities  have 
repeatedly  thwarted  planned 
terrorist  attacks  against  Ameri¬ 


can  and  other  targets  inside  It¬ 
aly,1'  he  said.  "The  latest  in¬ 
cident  shows  the  continuing 
danger  posed  by  terrorists  anu 
the  need  to  remain  at  a  high 
level  of  vigilance." 

Embassy  security,  already 
heightened  since  a  threat  13 
months  ago  and  the  attacks 
Sept.  1 1  in  the  United  States, 
was  increased  further  after  the 
at  re  sts  Wednesday. 

Italian  law  enforcement  offi¬ 
cials  differed  on  whether  the 
suspects  had  9  pounds  of  pure 
cyanide,  which  can  be  lethal,  or 
potassium  ferrocyanide,  a  rela¬ 
tively  benign  compound  that 
contains  traces  of  cyanide.  The 


men,  ages  30  to  40,  also  had 
about  100  counterfeit  residen¬ 
cy  permits  and  detailed  maps 
of  Rome  that  highlighted  the 
water-supply  network  near  the 
UL&  Embassy,  officials  said. 


"Italian  officials  are 
certainly  acting  as  if 
these  (recent  arrests) 
are  not  isolated 
—  Giuseppe  Melandri, 
a  former  officer 
in  the  Italian  army 


A  member  of  the  special  co¬ 
rn  bin  fere  paramilitary  police 
unit  that  raided  the  Moroccans' 
apartment  on  the  outskirts  of 
Rome  told  USA  TODAY  it  was 
clear  the  men  were  working  on 


a  criminal  plan,  Pending  fur¬ 
ther  investigations,  the  men 
had  been  charged  with  pos¬ 
session  of  an  illegal  compound 
and  false  documents,  he  said. 

Hie  arrests  came  a  week  af¬ 
ter  three  other  Moroccans 
were  apprehended  on  terror- 
related  charges,  Seven  Tuni¬ 
sians  arrested  last  year  for  al¬ 
leged  activities  linked  to  the 
funding  of  Osama  bin  Ladenfc 
al- Qaeda  terrorist  network 
went  on  trial  this  week  in  Mi¬ 
lan.  There  were  reports  that  at 
least  one  of  the  Momccans  ar¬ 
rested  Wednesday  was  linked 
to  the  Tunisians. 

Chief  Prosecutor  Salvatore 
Vecchione  reportedly  was  out¬ 
raged  that  news  of  the  raid  had 
leaked,  saying  it  may  damage 
an  ongoing  investigation. 

Earlier  Wednesday,  Interior 


Ministry  Undersecretary  Alfre¬ 
do  Mantovano  used  state-con- 
trolled  media  to  urge  residents 
to  report  activities  chat  could 
indicate  terror-related  plans. 

"Italian  officials  are  certainly 
acting  as  if  these  (recent  ar¬ 
rests  )  art  not  isolated,"  said  Gi¬ 
useppe  Meiandri.  a  security 
consultant  and  former  Italian 
army  officer.  “But  even  if  they 
gear  up  for  a  long-term  battle, 
these  sorts  of  activities  are 
very  hard  to  detect." 

If  the  powdered  compound 
found  at  the  suspects’  apart¬ 
ment  proves  to  be  high-grade 
cyanide,  the  quantity  would 
have  been  enough  to  infect  the 
water  supply  in  a  2-squarc- 
mile  area,  say  chemical  weap¬ 
ons  experts.  An  analysis  of  the 
compound  should  yield  results 
today  or  Friday. 


USA CH PPM 


Readiness  thru  Health 


PCIH  2004  Montreal 


1  October  2004  - 14 


“Water  plant  sabotage  the  work  of 

radical  group” 

MARTINV  TOWNSHIP,  Ml  —  24  Sep  03  -  Four  incendiary  devices  were 
found  inside  a  water-bottling  plant's  pumping  station,  and  a  radical 
environmental  group  said  it  was  responsible.  The  Associated  Press  (AP) 
reported  in  an  article  published  by  The  Kansas  City  Star. 

The  Earth  Liberation  Front  (ELF)  claimed  responsibility  for  the  devices, 
accusing  Ice  Mountain  Spring  Water  Co.  of  stealing  well  water  for  profit, 
the  article  said.  ELF  has  claimed  responsibility  for  many  arson  fires  at 
housing  construction  sites  in  the  West  and  Midwest. 
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Drinking  Water  System  Vulnerabilities 
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Basic  Water  Supply  Principles 
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Water  Sources 


fourcei 

Surface:  Lakes,  rivers, 
streams,  springs,  catchments, 
shallow  wells 

Ground:  Deep  wells _ 


Equipment 

Intakes  (floating  or 
submerged),  transmission 
lines,  pumps,  valves 


Dependency 

Dams,  power  supply 
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Inside  a  Water  Treatment  Facility 
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Storage  and  Distribution 


Fixed  components 

-  Storage 

•  Elevated  tanks 

•  Ground  level  tanks 

•  Underground  tanks 

•  Uncovered  tanks 

-  Distribution 

•  Pumps,  power, 
hydrants,  valves,  pipes, 
taps 
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IV 

Federal  and  US  DoD  Requirements 
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Public  Health  Security  and  Bioterrorism  Preparedness  and  Response 

Act  of  2002 

Section  401  establishes  WV A  and  Emergency  Response  Plan  (ERP) 
requirements 

-  WSVA  &  ERP  Deadlines  - 


Systems  serving 
population  of: 

Submit  VA  and  VA 
Certification  prior  to: 

ERP  Certification 

within  6  months  of 

VA  but  no  later  than: 

>/=  100,000  persons 

March  31,2003 

September  30,2003 

50,000  to  99,999  persons 

December  3 1,2003 

June  30,2004 

3,300  to  49,999  persons 

June  30,2004 

December  31,2004 
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The  U.S.  DoD  Also  Requires  Very 
Small  Water  Systems  to  Conduct 

Water  VAs 


•  All  systems  serving  >  25  people  required  to 
conduct  a  water  system  VA  to  include 

-  CONUS  &OCONUS 

-  Purchasing  and  consecutive  systems 

-  Unregulated  systems 

-  Small  CWS  and  Non-CWS 


Water  System  Vulnerability 
Assessment  Overview 
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WSVA  Information  and  Assistanace 


Awwa 

Research 

Foundation 

Advancing  the 
Science  of  Water* 


American  Water  Works  Association 


The  Authoritative  Resource-  for  Safe  Drinking  Water 
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USACHPPM  Guidance 


•  USACHPPM  Support 

-  Developed  US  Army 
Food  and  Water 
Vulnerability  Assessment 
Guide  (TG 188) 

-  “How-to”  guide  written 
for  the  project  officer 

-  Uses  Army  Risk 
Management  Process 


US .  ARMY 
FOOD  AND  WATER 
VULNERABILITY  ASSESSMENT  GUIDE 


TG  188 
August  2003 


Prepared  fcy: 

U.S.  Army  Center  fer 
Healthi  Frumeitiori  and 
Preventive  Medicine 


In  Coordination  With: 
Department  of  Defense 
Veterinary  Service 
Activity 
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Step  1.  Identify  Hazards 


Missions 


Lessons 

Learned 


New  Hazards 


Step  2.  Assess  Hazards 


•  Estimate  probability 

•  Estimate  severity 

•  Determine  risk  levels  for  each 
hazard  and  overall  mission  risk 


Step  5.  Supervise  and 
Evaluate 


New  Contr 


•  Supervise 

•  Evaluate 


Step  3.  Develop  Controls  an 
Make  Risk  Decision 


Step  4.  Implement 
Controls 


•  Develop  controls 

•  Determine  residual  risk  level  for 
each  hazard  and  overall  residual 
mission  risk 

•  Make  aecision 


Source:  FM  100-14 


Necessary  Components  of  a  Water  VA 


At  minimum  evaluate  the  following  water 
system  components 

-  Pipes  and  constructed  conveyances 

-  Physical  barriers 

-  Water  collection,  pretreatment,  and  treatment 

-  Storage  and  distribution  facilities 

-  Electronic,  computer,  and  other  automated 
systems  (SCADA) 

-  Use,  storage,  handling  of  chemicals 

-  Operation  and  maintenance  of  water  system 
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WSVAs  Look  Closely  at  Many  Details 

•  Characterize  water  system 

•  Identify  &  prioritize 
adverse  consequences 

•  Determine  acts  that  could 
result  in  undesired  consequences 

•  Assess  livelihood  of  those  acts 

•  Evaluate  existing  countermeasures 

•  Analyze  current  risk  &  develop  prioritized  plan 
to  reduce  rish 
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VI 

Application  and  Importance  of  Risk 
Assessment  Procedures 
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Probability  +  Severity  =  Risk 

TG 188  Uses  Operational  Risk  Management  (ORM) 


•  Probability:  The  likelihood  that  an  aggressor  could 
successfully  exploit  the  vulnerability 

-  Consider  the  effort  required  to  man,  train,  equip,  and  supply 
a  terrorist  to  carry  out  such  an  attack 

•  Severity:  The  extent  of  loss  that  would  result  if  a 
successful  attack  were  to  occur 

-  Takes  into  account  death,  widespread  illness,  ability  of  the 
plant  to  provide  water,  and  number  of  days  to  repair 
damage 

-  Also  considers  loss  of  public  confidence 
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Probability  is  One  Piece  Used  to 

Determine  Risk 


•  Highly  Likely 

—  Easy  to  execute.  No  existing  safeguards.  No  specialized  training  and 
very  little  equipment  required.  (80-100%  success  rate) 

•  Likely 

-  Does  not  require  high  level  of  training  and  supplies  are  easily  obtained. 
Minimal  protective  measures  in  place.  (60-80%  success  rate) 

•  Probable 

-  Reasonable  that  capability  exists  and  existing  measures  inadequate  to 
deter.  Collusion  with  an  insider  could  provide  a  terrorist  access  and  the 
necessary  training  and  equipment.  (40-60%  success  rate) 

•  Questionable 

-  Remotely  possible.  Specialized  knowledge,  training,  and  equipment 
required.  Information  may  be  obtained  by  an  outsider  from  generic 
sources.  (20-40%  success  rate) 
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Severity  is  the  Other  Piece 


•  Catastrophic 

-  Causes  deaths  or  widespread  severe  illness,  complete  loss  of  ability  to 
provide  safe  drinking  water  to  entire  water  system— will  take  >  2  days  to 
restore  service. 

•  Critical 

-  Causes  minor  illness,  severely  damages  ability  to  provide  safe  drinking 
water-service  can  be  restored  in  2  days,  major  property  damage. 

•  Marginal 

-  Degrades  ability  to  provide  safe  drinking  water,  appreciable 
property  damage,  requiring  a  construction  project  to  repair. 

•  Negligible 

-  Little  or  no  adverse  impact  on  ability  to  provide  safe  drinking 
water,  little  property  damage— does  not  affect  normal  equipment 
operation. 


PCIH  2004  Montreal 


1  October  2004  -  42 


HAZARD  SEVERITY 


Risk  Determination  Matrix 
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Prioritization  and  Execution 

Commander’s  Responsibility 

•  The  Threat  Changes 

•  The  Risk  Changes 

•  Difficulty  in  Implementing  Recommendations 

•  Time  Frame  Involved 

•  Resources  (Personnel  and  $$$)  Available 

•  Other  Force  (Health)  Protection  Demands 
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Early  Warning 
%  Systems 
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Integrated  Biomonitoring 

Platform 


•  Funded  by  EPA  source 
water  protection 
program  (EPA  lead) 

•  Integration  of  fish 
biomonitor  with  other 
systems 

•  Includes  development  of 
an  in-stream  fish 
biomonitor  chamber 

•  Also:  mobile  autonomous 
underwater  vehicle  with 
“biobay” 


USACHPPM 


Readiness  thru  Health 


Clams 
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The  Envrionmental  Sentinel 
Biomonitor  Concept 


•  Builds  on 
aquatic  biomonitor 
experience 

#To  use  cell-  or 

tissue-based  toxicity 
sensors 

o  Modular  design  for 
"plug  and  play" 
operation 

#  Reduced  logistical 


Biomonitoring 


Water  Sampling 
(continuous  or  single  sample) 


Available  Chemical 
Information 


Toxicity 

Identification 


•  Chemical  identification 

•  Chemical  concentration 


Field  Use 


Fixed  Facilities 


Deployments 


Homeland  Defense 


Commander’s  Decision 
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Bacterial  tenter  Examples 


•  Toxicity  causes  decrease  in  light 
output  by  luminescent  bacteria 

•  Uses  freeze-dried  bacteria 

•  Extensive  data  base 

•  Issues: 

-  False  negatives 

-  Water  matrix  effects 

-  Testing  underway  in  EPA’s 
Environmental  Technology 
Verification  (ETV)  program 
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Vertebrate  Cell  Sensor  Example: 
Fish  Chromatophores 


•  Toxicity  changes 
pigment 
patterns 

•  Cells  in 
disposable 
cartridges 

•  Issues: 

-  Cell  viability, 
availability 

-  Effects  data 

•  Source:  P. 
McFadden, 
Oregon  State  U. 


USA CH PPM 


Readiness  thru  Health 


Fish  Chromatophores 


liniTiiPvi  ■  ■ 


TntctifiKdrui  chiomaiophOEes  Into  HP  Inkjei- 
Stylt  flu i flics  ahc|  line  scanner  optics 


Pigment  move  men  ts  respond  to  multiple  agents,  such  as 
organophosphates  (dichlorvos,  OFF),  microbes  {Bacilli),  irritants 
(hydrogen  pero-ide),  and  nerve  channel  blockers  (K+) 
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Vertebrate  Cell  Sensor  Example: 
Mammalian  Neurons 


Neuronal  network  on 
microelectrode  array; 
measure  mean  spike 
rate 

Network  viability  up 
to  6  months;  1-2  days 
on  test 

Issues: 

-  Cell  source,  viability 

-  Informatics 

-  Sample  preparation 

Source:  J.  Pancrazio, 
NRL 
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Whole  Organism  Sensor  Example: 

C.  elegans  Movement 


•  Measure  nematode 
movement  with  miniature 
wireless  sensor 

•  Nematodes  genetically 
engineered  for  agent 
sensitivity 

•  Issues: 


Raw  Image  Segmented 


Establish  Bounding  Box 


-  C.  elegans  shelf  life 

-  Still  at  proof  of  concept  stage 

-  Tie-in  with  USACEHR  biomarber 
development  research 

•  Source: 

http://wormlab.caltech.edu/jpl.html 
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Reminder 


Don’t  forget  to  mention  non-bio 
chemical  monitoring  systems ! 
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SUMMARY 


•  Examples  of  water  supply  terrorism 

•  Drinking  water  system  vulnerabilities 

•  Federal  and  US  DoD  requirements 

•  WSVA  Overview 

•  Application/Importance  of  risk 
assessment  procedures 

•  Early  warning  systems 
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